Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e203631333137.roa
File:                     3139332e34322e39372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          OIb9UxGIWCinO6Sgkae/n3Fe/gvJGKVD/7fucW+tf5Y=
Subject key identifier:   D5:00:BA:CF:63:CD:BB:FD:9C:5D:1F:3B:6E:B8:39:0E:A7:9B:85:E1
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       707690ECB67C082B4401AA47E25AEB733F158AE5
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:26 +0000
ROA not before:           Sat 22 Oct 2022 04:28:26 +0000
ROA not after:            Sat 21 Oct 2023 04:33:26 +0000
asID:                     61317
IP address blocks:        193.42.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:76:90:ec:b6:7c:08:2b:44:01:aa:47:e2:5a:eb:73:3f:15:8a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:26 2022 GMT
            Not After : Oct 21 04:33:26 2023 GMT
        Subject: CN=D500BACF63CDBBFD9C5D1F3B6EB8390EA79B85E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:39:b2:57:f5:58:8e:dc:3a:c5:d8:03:b4:49:
                    fb:b5:7c:8b:2b:90:85:9d:99:b3:ed:0a:1b:ba:3e:
                    19:40:ef:7f:81:fb:eb:05:77:3a:a9:27:df:cb:3e:
                    67:25:65:92:ad:a3:a7:f8:81:34:3f:28:88:68:64:
                    ab:ea:a8:ae:8b:c7:7f:a6:fa:5e:b1:1e:4a:e3:8b:
                    3d:f6:85:c2:66:3a:09:cc:1b:6b:31:6f:ea:ce:a9:
                    56:ff:16:ab:2a:d5:60:92:5e:5e:a8:65:b7:af:b3:
                    6e:33:37:f9:85:57:de:2b:9d:e6:43:20:76:66:a9:
                    58:a5:e6:83:81:13:66:48:1c:61:ac:14:2d:9b:b8:
                    b7:3a:8b:59:5c:52:5d:86:62:db:03:46:72:7e:5b:
                    0a:36:54:8e:41:1c:1c:89:cc:fd:8a:68:3e:b0:9c:
                    16:94:16:63:8b:5d:41:af:b2:70:6f:33:05:be:09:
                    4a:d3:ca:e1:89:84:22:3b:10:4a:58:6b:2c:1c:a2:
                    62:42:f2:99:6f:a7:07:f1:63:ed:f1:16:28:7a:ae:
                    53:0a:9b:48:a8:d1:fc:ca:74:71:cb:c1:fb:00:c5:
                    ae:59:1a:2d:67:e8:8f:3e:16:fa:ab:ed:60:96:b3:
                    66:78:9f:f8:70:e6:15:07:fe:c0:f1:c9:94:c1:4b:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:00:BA:CF:63:CD:BB:FD:9C:5D:1F:3B:6E:B8:39:0E:A7:9B:85:E1
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f9:e3:2f:86:8b:5e:72:5a:25:2d:f9:bc:01:82:fd:df:1d:
         50:ee:cc:56:ea:d0:38:6b:ea:fd:58:1c:bf:47:38:16:a8:b0:
         ea:c8:37:53:a5:f2:38:32:b2:54:4b:45:9d:81:b4:d6:34:cd:
         25:f7:79:bb:8b:05:5c:f3:ec:25:ef:31:2f:1b:eb:37:81:55:
         e7:2d:5a:ad:fe:53:1f:f2:c3:a5:82:2c:cb:8d:1b:b1:f9:cf:
         70:2e:73:fb:a4:2c:cd:d2:27:a9:4c:0f:c8:a9:f6:88:b2:28:
         aa:1c:84:63:b1:6e:9e:8b:91:db:81:c0:99:aa:2d:92:97:3c:
         c8:6d:9e:97:a3:ea:2f:a2:63:38:76:14:0b:2a:60:5b:db:47:
         82:ef:3a:ef:ec:46:1d:aa:83:61:b0:68:d2:59:a3:a4:ad:45:
         b5:30:ec:dd:41:29:c7:da:db:24:70:0b:14:f1:c0:cd:5b:0d:
         0b:78:99:01:41:e8:9c:cc:64:1f:3b:bd:c9:2f:6c:27:dc:5d:
         58:c6:85:71:d9:4a:2d:63:ad:b0:7f:09:e5:51:d6:37:b9:1c:
         03:a9:d1:f6:34:36:61:65:fe:a8:30:db:ef:8e:f9:38:bc:40:
         87:7a:be:18:e4:97:b7:50:31:5d:dd:53:ea:bf:36:99:4e:56:
         31:02:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org